Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/f25066-9eba-43ac-bbb4-7b1778ddf7a9/1/M-PJ6vrUljO5GiO1bTVuWqRGodU.roa
File: M-PJ6vrUljO5GiO1bTVuWqRGodU.roa (raw, json)
Hash identifier: NUGmT2qJ0lXV4mGRd9PXKvEMzMtIEoaySG8JhLii/DE=
Subject key identifier: 33:E3:C9:EA:FA:D4:96:33:B9:1A:23:B5:6D:35:6E:5A:A4:46:A1:D5
Certificate issuer: /CN=19cdd8206c1e352c5065e481797ef77af0c3de8d
Certificate serial: 0184C2FD23C9CC152CEB88AA506B2677A00D
Authority key identifier: 19:CD:D8:20:6C:1E:35:2C:50:65:E4:81:79:7E:F7:7A:F0:C3:DE:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gc3YIGweNSxQZeSBeX73evDD3o0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/f25066-9eba-43ac-bbb4-7b1778ddf7a9/1/M-PJ6vrUljO5GiO1bTVuWqRGodU.roa
Signing time: Tue 29 Nov 2022 10:44:40 +0000
ROA not before: Tue 29 Nov 2022 10:44:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51669
IP address blocks: 176.120.176.0/22 maxlen: 22
176.120.176.0/20 maxlen: 20
176.120.180.0/22 maxlen: 22
176.120.184.0/22 maxlen: 22
176.120.188.0/22 maxlen: 22
176.120.190.0/24 maxlen: 24
178.159.48.0/20 maxlen: 20
178.159.48.0/22 maxlen: 22
178.159.56.0/22 maxlen: 22
178.159.52.0/22 maxlen: 22
178.159.60.0/22 maxlen: 22
31.129.128.0/22 maxlen: 22
31.129.132.0/22 maxlen: 22
31.129.128.0/19 maxlen: 19
31.129.133.0/24 maxlen: 24
185.63.217.0/24 maxlen: 24
185.63.216.0/23 maxlen: 23
185.63.216.0/24 maxlen: 24
31.129.136.0/22 maxlen: 22
185.63.218.0/23 maxlen: 23
185.63.219.0/24 maxlen: 24
185.63.218.0/24 maxlen: 24
31.129.144.0/22 maxlen: 22
31.129.140.0/22 maxlen: 22
31.129.148.0/22 maxlen: 22
31.129.152.0/22 maxlen: 22
31.129.156.0/22 maxlen: 22
31.129.156.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:c2:fd:23:c9:cc:15:2c:eb:88:aa:50:6b:26:77:a0:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19cdd8206c1e352c5065e481797ef77af0c3de8d
Validity
Not Before: Nov 29 10:44:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=33e3c9eafad49633b91a23b56d356e5aa446a1d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:64:75:63:3b:d0:22:2e:dc:f9:04:1b:38:b9:
04:3f:e5:4d:32:e1:42:f1:37:15:63:ec:d5:40:22:
c2:af:3f:35:c1:b1:90:80:54:28:9a:12:8b:a5:91:
da:0b:20:06:ab:ff:5f:fe:7f:96:7a:9a:e0:2f:6c:
f0:01:14:70:51:6f:46:29:6f:ad:d1:3e:8f:19:46:
1c:90:68:19:13:29:b8:eb:04:52:ed:4a:a7:e3:68:
bd:51:04:bf:95:ce:49:d2:52:eb:9a:07:0d:ee:56:
1d:cc:f0:59:61:73:46:5d:a4:82:58:f3:2f:65:7d:
10:c4:f1:82:29:76:80:b8:89:29:cb:4c:2c:73:72:
1c:f0:25:f1:c0:ee:d2:cf:1a:56:2e:a4:32:f8:ae:
e9:03:ff:0d:3e:5f:ee:33:36:b7:a5:8e:75:a0:85:
8c:a6:06:4d:41:5d:9d:90:6a:fc:ec:31:51:5c:51:
2e:a6:ad:35:f3:84:c2:59:4c:98:35:ff:69:ab:b1:
1a:54:d9:e6:a7:d9:f3:d6:4c:6e:25:b6:d5:21:1a:
98:26:d4:fe:5e:f8:4a:3b:bd:66:d6:e3:70:f7:33:
e4:dd:43:88:06:9d:b7:78:69:9b:d8:52:2c:3a:6f:
8c:e6:fc:b7:e8:eb:5b:6f:40:e9:9f:22:7f:e1:4d:
e9:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:E3:C9:EA:FA:D4:96:33:B9:1A:23:B5:6D:35:6E:5A:A4:46:A1:D5
X509v3 Authority Key Identifier:
keyid:19:CD:D8:20:6C:1E:35:2C:50:65:E4:81:79:7E:F7:7A:F0:C3:DE:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gc3YIGweNSxQZeSBeX73evDD3o0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/f25066-9eba-43ac-bbb4-7b1778ddf7a9/1/M-PJ6vrUljO5GiO1bTVuWqRGodU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/f25066-9eba-43ac-bbb4-7b1778ddf7a9/1/Gc3YIGweNSxQZeSBeX73evDD3o0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.129.128.0/19
176.120.176.0/20
178.159.48.0/20
185.63.216.0/22
Signature Algorithm: sha256WithRSAEncryption
a7:3f:38:c1:c2:07:cb:fa:97:96:3a:0e:5d:02:08:fc:ac:89:
ed:c6:d5:e1:83:54:05:8e:72:a2:5e:ca:eb:da:90:30:9a:4a:
64:e8:45:12:10:4e:8b:de:e0:e5:62:3a:db:4d:98:a6:04:f9:
4c:26:bc:e4:49:f5:16:3f:b2:bb:6f:51:f6:98:d6:b6:e7:ed:
0b:31:be:aa:d9:ac:58:61:a8:bf:35:28:22:db:e3:29:22:6e:
88:97:37:3a:f4:08:7a:06:05:51:1c:5e:36:a7:83:e3:8a:0d:
90:6b:7b:83:d9:62:ad:74:ad:74:6d:5f:3a:fb:0d:4f:73:7c:
b2:13:97:b2:d0:91:87:6b:8c:59:65:d8:2e:4d:3e:18:56:84:
99:9d:c8:1b:07:33:a7:37:44:e0:03:4b:23:1b:5d:0b:8b:00:
6d:c8:ac:c1:e3:25:bc:04:b9:ec:ab:b6:bf:f9:00:df:a2:93:
f4:86:95:45:5f:c9:d7:c5:41:f3:f8:1f:60:c6:2f:51:80:0b:
6c:fd:af:0b:09:9e:5a:d9:53:62:a9:4e:a5:ea:bb:97:2a:62:
5a:8c:dd:64:50:09:e7:80:46:bc:b3:97:29:78:34:99:a4:43:
d8:7d:35:cb:98:a4:76:b9:ca:fb:ee:d9:43:d4:29:e4:f0:97:
17:78:3f:67
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAYTC/SPJzBUs64iqUGsmd6ANMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5Y2RkODIwNmMxZTM1MmM1MDY1ZTQ4MTc5N2VmNzdhZjBj
M2RlOGQwHhcNMjIxMTI5MTA0NDQwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzM2UzYzllYWZhZDQ5NjMzYjkxYTIzYjU2ZDM1NmU1YWE0NDZhMWQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxGR1YzvQIi7c+QQbOLkEP+VNMuFC
8TcVY+zVQCLCrz81wbGQgFQomhKLpZHaCyAGq/9f/n+WeprgL2zwARRwUW9GKW+t
0T6PGUYckGgZEym46wRS7Uqn42i9UQS/lc5J0lLrmgcN7lYdzPBZYXNGXaSCWPMv
ZX0QxPGCKXaAuIkpy0wsc3Ic8CXxwO7SzxpWLqQy+K7pA/8NPl/uMza3pY51oIWM
pgZNQV2dkGr87DFRXFEupq0184TCWUyYNf9pq7EaVNnmp9nz1kxuJbbVIRqYJtT+
XvhKO71m1uNw9zPk3UOIBp23eGmb2FIsOm+M5vy36Otbb0DpnyJ/4U3pwwIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFDPjyer61JYzuRojtW01blqkRqHVMB8GA1UdIwQY
MBaAFBnN2CBsHjUsUGXkgXl+93rww96NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR2MzWUlHd2VOU3hRWmVTQmVYNzNldkREM28wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi9mMjUwNjYtOWViYS00M2FjLWJiYjQt
N2IxNzc4ZGRmN2E5LzEvTS1QSjZ2clVsak81R2lPMWJUVnVXcVJHb2RVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Mi9mMjUwNjYtOWViYS00M2FjLWJiYjQtN2IxNzc4ZGRmN2E5
LzEvR2MzWUlHd2VOU3hRWmVTQmVYNzNldkREM28wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQFH4GAAwQE
sHiwAwQEsp8wAwQCuT/YMA0GCSqGSIb3DQEBCwUAA4IBAQCnPzjBwgfL+peWOg5d
Agj8rIntxtXhg1QFjnKiXsrr2pAwmkpk6EUSEE6L3uDlYjrbTZimBPlMJrzkSfUW
P7K7b1H2mNa25+0LMb6q2axYYai/NSgi2+MpIm6Ilzc69Ah6BgVRHF42p4Pjig2Q
a3uD2WKtdK10bV86+w1Pc3yyE5ey0JGHa4xZZdguTT4YVoSZncgbBzOnN0TgA0sj
G10LiwBtyKzB4yW8BLnsq7a/+QDfopP0hpVFX8nXxUHz+B9gxi9RgAts/a8LCZ5a
2VNiqU6l6ruXKmJajN1kUAnngEa8s5cpeDSZpEPYfTXLmKR2ucr77tlD1Cnk8JcX
eD9n
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:22 2023 by rpki-client on console-ams.rpki-client.org